Thanks @TotallyInformation , I really would avoid using NGINX because it is not so simple making it work (in fact I'm using caddy v2 because configuring it wasn't a pain, undoubtedly.
Meanwhile I've set OAuth authentication with Google and Passport following that thread but something has gone wrong because every Google user could login in my node-red, so I've restored the basic internal authentication method.